Logging Flaw Allows Attackers to Read Sensitive Data via Login Function

CVE-2023-51712
4.7MEDIUM

Key Information

Vendor
Trusted Firmware-M
Status
Trusted Firmware-m
Vendor
CVE Published:
5 September 2024

Summary

An issue was discovered in Trusted Firmware-M through 2.0.0. The lack of argument verification in the logging subsystem allows attackers to read sensitive data via the login function.

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published.

Collectors

NVD Database
.